Addressing Emerging Threats Through Adaptive Software Development
In today’s interconnected world, the threat landscape of cybersecurity is more dynamic and sophisticated than ever. Organizations face an array of challenges from malicious actors…
Category: CyberSecurityNews
Hackers Using Weaponized ISO & IMG Files to Attack Organizations
The notorious hacking group known as Earth Kapre, also referred to as RedCurl and Red Wolf, has been targeting organizations across the globe with weaponized…
BianLian Hackers Exploiting TeamCity servers to Deploy
The notorious hacking group BianLian, known for its sophisticated cyber attacks, has shifted its focus to extortion-only operations following the release of a decryptor by…
Vulnerabilities in Fonts Allow XXE & Arbitrary Command Execution
The popular fonts used in web development and design can be exploited to launch XML External Entity (XXE) attacks and execute arbitrary commands. These vulnerabilities,…
Beware of Fake Trading Apps on Google Play & App Store
A recent investigation unveiled a trend of fake trading apps on Google Play and the App Store designed to trick unsuspecting users out of their…
Magnet Goblin Hackers Exploiting 1-day Vulnerabilities Linux Servers
Threat actors often target Linux servers due to their widespread use in critical infrastructure, web hosting, and cloud environments. The open-source nature of the Linux…
Top 10 Cloud Security Mitigation Strategies
NSA and CISA jointly released “Top 10 Cloud Security Mitigation Strategies” to advise cloud users on critical security practices for migrating data. The National Security…
Malware Families Adapting To COM Hijacking Technique For Persistence
COM (Component Object Model) hijacking is a technique in which threat actors exploit the core architecture of Windows by adding a new value on a…
150K+ Fortinet Devices Vulnerable to Critical Code Execution Flaw
A critical security flaw identified as CVE-2024-21762 has been discovered in Fortinet’s FortiOS and FortiProxy secure web gateway systems, potentially impacting around 150,000 devices worldwide.…
Russian Spies Hacked Microsoft Email Systems & Accessed Code
Microsoft has disclosed that Russian government hackers, identified as the group Midnight Blizzard, have successfully infiltrated its corporate email systems and stolen source codes. The…
Gitlab Authorization Vulnerability Let Attackers Steal Variables
GitLab has announced the release of updated versions for its Community Edition (CE) and Enterprise Edition (EE) platforms. These updates address critical vulnerabilities that could…
Android Malware-as-Service “Coper” Offering Features to Hackers
The Coper malware, a descendant of the Exobot malware family, was first distributed as a fake version of Bancolombia’s ‘Personas’ application. Fast forwarding to 2022,…